DNSSEC Analyzer - zsoltsandor.me

Domain Name:

Time: 2020-07-12 20:12:21 UTC, NTP stratum 4

Analyzing DNSSEC problems for zsoltsandor.me

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (864 bytes) ;; HEADER SECTION ;; id = 47535 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200801000000 20200711000000 20326 . Vladon0p/7tDn7SfPe6dG6iTddTbEL++KLJCI6cjSIDo3QwyAn0uKhjsVstQE//M9DR3RaCzclwK VJ0kuRZJl+tAEimBMhT85+fh2k5aTjyE2z3ysQv0F0clHjbyydnXe6CJ0PxOfs6hLLkHXkX58EYM fN0xlR4Ch2yY3gENKSyc0kcvsgA81JO1eBc1rD7Hy8ROHltlHS7rgI/9Q7OsMvH8c25zU4iRILJS unxWGfXmCrwZOVKDmPqVuWLkufPTKrxhoNTVNoxXfPxPeiXmC/c8YGDLzjssAi5hQaoNnrDFn870 5fJRE10QKPmYZcyHlQov9ItY3qOtVclHmQ99WA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200801000000 20200711000000 20326 . Vladon0p/7tDn7SfPe6dG6iTddTbEL++KLJCI6cjSIDo3QwyAn0uKhjsVstQE//M9DR3RaCzclwK VJ0kuRZJl+tAEimBMhT85+fh2k5aTjyE2z3ysQv0F0clHjbyydnXe6CJ0PxOfs6hLLkHXkX58EYM fN0xlR4Ch2yY3gENKSyc0kcvsgA81JO1eBc1rD7Hy8ROHltlHS7rgI/9Q7OsMvH8c25zU4iRILJS unxWGfXmCrwZOVKDmPqVuWLkufPTKrxhoNTVNoxXfPxPeiXmC/c8YGDLzjssAi5hQaoNnrDFn870 5fJRE10QKPmYZcyHlQov9ItY3qOtVclHmQ99WA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	Query to m.root-servers.net for zsoltsandor.me/A
	Received 723 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (723 bytes) ;; HEADER SECTION ;; id = 64504 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) me. 172800 IN NS b0.nic.me. me. 172800 IN NS a2.nic.me. me. 172800 IN NS a0.nic.me. me. 172800 IN NS b2.nic.me. me. 172800 IN NS c0.nic.me. me. 86400 IN DS ( 2569 7 2 94e798106f033500e67567b197ae9132c0e916764dc743c55a9eca3c7bf559e2 ) me. 86400 IN DS 2569 7 1 09ba1eb4d20402620881fd9848994417800db26a me. 86400 IN RRSIG ( DS 8 1 86400 20200725170000 20200712160000 46594 . 1C7QA28wmIkgaMvGysOzt8Kx3//o5Ez7xWlMiEffjrK1Yu4mHPlXuaZM1Z3vEmc9U99cmcCtl9fu FHU/tKKNroIoeakz9ckdUnebYorJDZtW0BFBIwD2CzSFMylUlNlMAJ2qdR2Cd8UZsHjx9yVWWyIG a7YQaA4AOnhZzUZxxXt4qidrJxQVFbVebV9oArQFxWh1WkZK0ZJTFShepjH0iNyfxYN4iYJXEpoJ jpIc1kWsZjzHGimhcPAcAtptuxGaFRKoGIg1psXbHVeFwzDePI8lHnEehqWOPTDq9zSOYYGPF5q+ qVX0+uE37AKy6A2XNoclJCKs1+mflCgKCdCrGA== ) ;; ADDITIONAL SECTION (11 records) a0.nic.me. 172800 IN A 199.253.59.1 a2.nic.me. 172800 IN A 199.249.119.1 b0.nic.me. 172800 IN A 199.253.60.1 b2.nic.me. 172800 IN A 199.249.127.1 c0.nic.me. 172800 IN A 199.253.61.1 a0.nic.me. 172800 IN AAAA 2001:500:53::1 a2.nic.me. 172800 IN AAAA 2001:500:47::1 b0.nic.me. 172800 IN AAAA 2001:500:54::1 b2.nic.me. 172800 IN AAAA 2001:500:4f::1 c0.nic.me. 172800 IN AAAA 2001:500:55::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for me/DNSKEY
	Received 711 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (711 bytes) ;; HEADER SECTION ;; id = 64056 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; me. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) me. 172800 IN NS a0.nic.me. me. 172800 IN NS a2.nic.me. me. 172800 IN NS b0.nic.me. me. 172800 IN NS b2.nic.me. me. 172800 IN NS c0.nic.me. me. 86400 IN DS 2569 7 1 09ba1eb4d20402620881fd9848994417800db26a me. 86400 IN DS ( 2569 7 2 94e798106f033500e67567b197ae9132c0e916764dc743c55a9eca3c7bf559e2 ) me. 86400 IN RRSIG ( DS 8 1 86400 20200725170000 20200712160000 46594 . 1C7QA28wmIkgaMvGysOzt8Kx3//o5Ez7xWlMiEffjrK1Yu4mHPlXuaZM1Z3vEmc9U99cmcCtl9fu FHU/tKKNroIoeakz9ckdUnebYorJDZtW0BFBIwD2CzSFMylUlNlMAJ2qdR2Cd8UZsHjx9yVWWyIG a7YQaA4AOnhZzUZxxXt4qidrJxQVFbVebV9oArQFxWh1WkZK0ZJTFShepjH0iNyfxYN4iYJXEpoJ jpIc1kWsZjzHGimhcPAcAtptuxGaFRKoGIg1psXbHVeFwzDePI8lHnEehqWOPTDq9zSOYYGPF5q+ qVX0+uE37AKy6A2XNoclJCKs1+mflCgKCdCrGA== ) ;; ADDITIONAL SECTION (11 records) a0.nic.me. 172800 IN A 199.253.59.1 a2.nic.me. 172800 IN A 199.249.119.1 b0.nic.me. 172800 IN A 199.253.60.1 b2.nic.me. 172800 IN A 199.249.127.1 c0.nic.me. 172800 IN A 199.253.61.1 a0.nic.me. 172800 IN AAAA 2001:500:53::1 a2.nic.me. 172800 IN AAAA 2001:500:47::1 b0.nic.me. 172800 IN AAAA 2001:500:54::1 b2.nic.me. 172800 IN AAAA 2001:500:4f::1 c0.nic.me. 172800 IN AAAA 2001:500:55::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone me

	Checking DS between . and me
	Query to b.root-servers.net for me/DS
	Received 402 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (402 bytes) ;; HEADER SECTION ;; id = 24620 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; me. IN DS ;; ANSWER SECTION (3 records) me. 86400 IN DS 2569 7 1 09ba1eb4d20402620881fd9848994417800db26a me. 86400 IN DS ( 2569 7 2 94e798106f033500e67567b197ae9132c0e916764dc743c55a9eca3c7bf559e2 ) me. 86400 IN RRSIG ( DS 8 1 86400 20200725170000 20200712160000 46594 . 1C7QA28wmIkgaMvGysOzt8Kx3//o5Ez7xWlMiEffjrK1Yu4mHPlXuaZM1Z3vEmc9U99cmcCtl9fu FHU/tKKNroIoeakz9ckdUnebYorJDZtW0BFBIwD2CzSFMylUlNlMAJ2qdR2Cd8UZsHjx9yVWWyIG a7YQaA4AOnhZzUZxxXt4qidrJxQVFbVebV9oArQFxWh1WkZK0ZJTFShepjH0iNyfxYN4iYJXEpoJ jpIc1kWsZjzHGimhcPAcAtptuxGaFRKoGIg1psXbHVeFwzDePI8lHnEehqWOPTDq9zSOYYGPF5q+ qVX0+uE37AKy6A2XNoclJCKs1+mflCgKCdCrGA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for me in the . zone
	DS=2569/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=2569/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`me. 86400 IN RRSIG ( DS 8 1 86400 20200725170000 20200712160000 46594 . 1C7QA28wmIkgaMvGysOzt8Kx3//o5Ez7xWlMiEffjrK1Yu4mHPlXuaZM1Z3vEmc9U99cmcCtl9fu FHU/tKKNroIoeakz9ckdUnebYorJDZtW0BFBIwD2CzSFMylUlNlMAJ2qdR2Cd8UZsHjx9yVWWyIG a7YQaA4AOnhZzUZxxXt4qidrJxQVFbVebV9oArQFxWh1WkZK0ZJTFShepjH0iNyfxYN4iYJXEpoJ jpIc1kWsZjzHGimhcPAcAtptuxGaFRKoGIg1psXbHVeFwzDePI8lHnEehqWOPTDq9zSOYYGPF5q+ qVX0+uE37AKy6A2XNoclJCKs1+mflCgKCdCrGA== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=2569/SHA-1 is now in the chain-of-trust
	`me. 86400 IN DS 2569 7 1 09ba1eb4d20402620881fd9848994417800db26a`
	`me. 86400 IN DS ( 2569 7 2 94e798106f033500e67567b197ae9132c0e916764dc743c55a9eca3c7bf559e2 )`
	Query to a2.nic.me for me/DNSKEY
	Received 1621 bytes from 199.249.119.1
	;; Answer received from 199.249.119.1 (1621 bytes) ;; HEADER SECTION ;; id = 37122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; me. IN DNSKEY ;; ANSWER SECTION (7 records) me. 900 IN DNSKEY ( 256 3 7 AwEAAc9YI2WgkNnOaapnzpk/j/YTFqC1tfrGCOQlOjvUhBNzZECowhdPZSTdskzYE6hTrYSYm6am eRgXXTlVWUhBG5VaOkwCG4QrDDUgmjA1/ZchOh+bmxxIuG9Uh2duCofEzofEErlh2Pr6NmSB3qU8 8p7pRnN07dE3lfYhDPmP0P2H ) ; Key ID = 52877 me. 900 IN DNSKEY ( 257 3 7 AwEAAeRV0TwM0wfCUti4a2mvTy/gTfDKFA2E6StlOwWb6FA32ohK9t5tROsh/qWPblIpeqHVspI7 2lf+ItVG0Rw5scO2zf7LonDiyALN+7Fag4H6djY2hfae4k7GzRhraZy7uzxwR0+8NTo9oFtnO2l5 GHPEtOBQ8kWQz6967/k+ILG4pKkk9SdY3q1HtAmCxFz9Vx5ozuUHByVi81frL/u+S9rwPxLub60L 5aSN9SrRI3nbg2GEEus3yyXS/usyCzGMRpRnPUGT0GWke4Es6arCBNem4rsfZFkxlbO0rS9C12vJ zn2VJFeCTp0ZVEmSjh3x9homuYCHRfKJQXdsVAwVors= ) ; Key ID = 53233 me. 900 IN DNSKEY ( 257 3 7 AwEAAXguWrlanOI9LEL+ggmMWlkBo/Vk+WBze4Lk9L2WrLh+AXHBmdCp2fN8XicXtbQWwpc4oRVg rmc65/RxtUmEVCTOzZC9Z9Ufshcte8xHVrGww/7wQQ3DM4g6UC1gkVGJm7LKsF50rhzlRT6r/wzv dYVwXKBdmtau3fwMrBUbooSwRPSw56B/wS8DEGFmie0vphpMCCQGnx7p/GIDxbbWBBwzQr1u/tDj 30YfJ4o1qJcDDA9RESXXAh6Zp/jVV5sT7cI0V90fH6p/CkmNQJ52Stf69uOkCuag2dwruDbVIxU6 2EYYSRetgH4gpABwPVgiVY/g47cIjY0Et8EXc21Kp+s= ) ; Key ID = 2569 me. 900 IN DNSKEY ( 256 3 7 AwEAAba3OxA8fJwaQJ6joKPYrGDK7+mepfbwfpnNmfO37YwtYSJgG1U3r6IRWyo+dAD/8kz0XYvr 4jHGIp3hUwiqukcAyz03zwF4rLlvA03SEz++B8rCGr3WCNCCLs8On1VLSZzcNWzYqoD/ayl1UDR1 x0/Y9RoU6+Im+gNEYaG84TJT ) ; Key ID = 20555 me. 900 IN RRSIG ( DNSKEY 7 1 900 20200730153053 20200709143053 2569 me. RF83bKPjfRwiOLQg/T5/QTIGAwwxLG0g+IK+R8Wu3KiQL7rm6Ye1PT5l4UiAbfYaoPbl9j7+Lv5C nPVX2cuwE38IuO6y8pg1BgESz870kiTr1yf17FszOnBwEZzVS1i7YkHpbq8WtrzUG7HSxpmAR1Ac t/mYUQfh26K2KIm7OFWkINaNKlweh0UMoL3Qyg2rSZOzHaQy2dRiTH3NGYuxzrkSG+ruia1l5dlL Riyb1CDY2cj5zMCa+o/0s3fbV4yAcwau7dlSFDQG/Q/4J6izOIP5RdccyjooGgeaMissGeZ/gyFj MEq6DnHjzfqjC5wEiYaQ0s+3Qpa3cvSnRc3M5A== ) me. 900 IN RRSIG ( DNSKEY 7 1 900 20200730153053 20200709143053 20555 me. GfEnSsplCaD+4XJanQlgxhy7ufFobkFCWtgSPFeHW1Prgc743lBIViSoUHK+gDCINvN/c2bSU5Sw uwMdRfq12Gr4TP5jTsvxJ/cmSy2ATQqDqU9X1d/xhFiOXIYXFjlR4RP2ig4O8Ix2aNqDGcGTAYa9 nV5/yizak/YUPfp+GLM= ) me. 900 IN RRSIG ( DNSKEY 7 1 900 20200730153053 20200709143053 53233 me. A13za+ULC+ntPu72OX7tJELIp27MHs7GjoS9YsNW9hG9KeooVyW5esU5LKSaWmzoBMeHeOur1xs/ oegtT8tPLqdpMAmJ3eYNhSvyDkUhwxsZoOVxqUx4xt7zd4/ryQqY0A3kirmnpevfFwA2cBzNZPBI hVspJXNRnbNBlAXZgC4CoHGJocm84BJwjjMhoMx1wDz+oazDGI9zVPsoLLXjauDre9/4132STIcj W3R1z/GQ0Ts4UcUoQ8Gb91a8AaNCLPgwAo3jf4K8BwnGyLnJsVGiGoQs9P8ArEAIVvS1LLcXzLwG VKo5upmTGPqYccbo4R44mGwcnlW5owtMChpphg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for me
	`me. 900 IN DNSKEY ( 256 3 7 AwEAAc9YI2WgkNnOaapnzpk/j/YTFqC1tfrGCOQlOjvUhBNzZECowhdPZSTdskzYE6hTrYSYm6am eRgXXTlVWUhBG5VaOkwCG4QrDDUgmjA1/ZchOh+bmxxIuG9Uh2duCofEzofEErlh2Pr6NmSB3qU8 8p7pRnN07dE3lfYhDPmP0P2H ) ; Key ID = 52877`
	`me. 900 IN DNSKEY ( 257 3 7 AwEAAeRV0TwM0wfCUti4a2mvTy/gTfDKFA2E6StlOwWb6FA32ohK9t5tROsh/qWPblIpeqHVspI7 2lf+ItVG0Rw5scO2zf7LonDiyALN+7Fag4H6djY2hfae4k7GzRhraZy7uzxwR0+8NTo9oFtnO2l5 GHPEtOBQ8kWQz6967/k+ILG4pKkk9SdY3q1HtAmCxFz9Vx5ozuUHByVi81frL/u+S9rwPxLub60L 5aSN9SrRI3nbg2GEEus3yyXS/usyCzGMRpRnPUGT0GWke4Es6arCBNem4rsfZFkxlbO0rS9C12vJ zn2VJFeCTp0ZVEmSjh3x9homuYCHRfKJQXdsVAwVors= ) ; Key ID = 53233`
	`me. 900 IN DNSKEY ( 257 3 7 AwEAAXguWrlanOI9LEL+ggmMWlkBo/Vk+WBze4Lk9L2WrLh+AXHBmdCp2fN8XicXtbQWwpc4oRVg rmc65/RxtUmEVCTOzZC9Z9Ufshcte8xHVrGww/7wQQ3DM4g6UC1gkVGJm7LKsF50rhzlRT6r/wzv dYVwXKBdmtau3fwMrBUbooSwRPSw56B/wS8DEGFmie0vphpMCCQGnx7p/GIDxbbWBBwzQr1u/tDj 30YfJ4o1qJcDDA9RESXXAh6Zp/jVV5sT7cI0V90fH6p/CkmNQJ52Stf69uOkCuag2dwruDbVIxU6 2EYYSRetgH4gpABwPVgiVY/g47cIjY0Et8EXc21Kp+s= ) ; Key ID = 2569`
	`me. 900 IN DNSKEY ( 256 3 7 AwEAAba3OxA8fJwaQJ6joKPYrGDK7+mepfbwfpnNmfO37YwtYSJgG1U3r6IRWyo+dAD/8kz0XYvr 4jHGIp3hUwiqukcAyz03zwF4rLlvA03SEz++B8rCGr3WCNCCLs8On1VLSZzcNWzYqoD/ayl1UDR1 x0/Y9RoU6+Im+gNEYaG84TJT ) ; Key ID = 20555`
	DNSKEY=2569/SEP is now in the chain-of-trust
	DS=2569/SHA-1 verifies DNSKEY=2569/SEP
	DS=2569/SHA-256 verifies DNSKEY=2569/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`me. 900 IN RRSIG ( DNSKEY 7 1 900 20200730153053 20200709143053 2569 me. RF83bKPjfRwiOLQg/T5/QTIGAwwxLG0g+IK+R8Wu3KiQL7rm6Ye1PT5l4UiAbfYaoPbl9j7+Lv5C nPVX2cuwE38IuO6y8pg1BgESz870kiTr1yf17FszOnBwEZzVS1i7YkHpbq8WtrzUG7HSxpmAR1Ac t/mYUQfh26K2KIm7OFWkINaNKlweh0UMoL3Qyg2rSZOzHaQy2dRiTH3NGYuxzrkSG+ruia1l5dlL Riyb1CDY2cj5zMCa+o/0s3fbV4yAcwau7dlSFDQG/Q/4J6izOIP5RdccyjooGgeaMissGeZ/gyFj MEq6DnHjzfqjC5wEiYaQ0s+3Qpa3cvSnRc3M5A== )`
	`me. 900 IN RRSIG ( DNSKEY 7 1 900 20200730153053 20200709143053 20555 me. GfEnSsplCaD+4XJanQlgxhy7ufFobkFCWtgSPFeHW1Prgc743lBIViSoUHK+gDCINvN/c2bSU5Sw uwMdRfq12Gr4TP5jTsvxJ/cmSy2ATQqDqU9X1d/xhFiOXIYXFjlR4RP2ig4O8Ix2aNqDGcGTAYa9 nV5/yizak/YUPfp+GLM= )`
	`me. 900 IN RRSIG ( DNSKEY 7 1 900 20200730153053 20200709143053 53233 me. A13za+ULC+ntPu72OX7tJELIp27MHs7GjoS9YsNW9hG9KeooVyW5esU5LKSaWmzoBMeHeOur1xs/ oegtT8tPLqdpMAmJ3eYNhSvyDkUhwxsZoOVxqUx4xt7zd4/ryQqY0A3kirmnpevfFwA2cBzNZPBI hVspJXNRnbNBlAXZgC4CoHGJocm84BJwjjMhoMx1wDz+oazDGI9zVPsoLLXjauDre9/4132STIcj W3R1z/GQ0Ts4UcUoQ8Gb91a8AaNCLPgwAo3jf4K8BwnGyLnJsVGiGoQs9P8ArEAIVvS1LLcXzLwG VKo5upmTGPqYccbo4R44mGwcnlW5owtMChpphg== )`
	RRSIG=2569 and DNSKEY=2569/SEP verifies the DNSKEY RRset
	RRSIG=20555 and DNSKEY=20555 verifies the DNSKEY RRset
	RRSIG=53233 and DNSKEY=53233/SEP verifies the DNSKEY RRset
	DNSKEY=52877 is now in the chain-of-trust
	DNSKEY=53233/SEP is now in the chain-of-trust
	DNSKEY=20555 is now in the chain-of-trust
	Query to b2.nic.me for zsoltsandor.me/A
	Received 308 bytes from 199.249.127.1
	;; Answer received from 199.249.127.1 (308 bytes) ;; HEADER SECTION ;; id = 33247 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) zsoltsandor.me. 86400 IN NS beth.ns.cloudflare.com. zsoltsandor.me. 86400 IN NS walt.ns.cloudflare.com. zsoltsandor.me. 86400 IN DS ( 2371 13 2 cf65c671efbba7c386a6989e017991c1fc07acb31dbf8741460d36b71730c398 ) zsoltsandor.me. 86400 IN RRSIG ( DS 7 2 86400 20200730153053 20200709143053 20555 me. TsCFrSoD+m8Z/c4Fs/NIFAIq/JMyIkF2BPK+wbAyKk/nnw4KzMGcxM2TkPRT0yxswObBUS7qJ0ma 8o4e1k1QKPVi+ntI4jzqQL3UpUUpml/lL2DQXClD4QljPjfl3qNp1La7IdpndNkKDTP0cuvbPihu JSPrhz7eRAf6iwdXiDY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to c0.nic.me for zsoltsandor.me/DNSKEY
	Received 308 bytes from 199.253.61.1
	;; Answer received from 199.253.61.1 (308 bytes) ;; HEADER SECTION ;; id = 34825 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) zsoltsandor.me. 86400 IN NS beth.ns.cloudflare.com. zsoltsandor.me. 86400 IN NS walt.ns.cloudflare.com. zsoltsandor.me. 86400 IN DS ( 2371 13 2 cf65c671efbba7c386a6989e017991c1fc07acb31dbf8741460d36b71730c398 ) zsoltsandor.me. 86400 IN RRSIG ( DS 7 2 86400 20200730153053 20200709143053 20555 me. TsCFrSoD+m8Z/c4Fs/NIFAIq/JMyIkF2BPK+wbAyKk/nnw4KzMGcxM2TkPRT0yxswObBUS7qJ0ma 8o4e1k1QKPVi+ntI4jzqQL3UpUUpml/lL2DQXClD4QljPjfl3qNp1La7IdpndNkKDTP0cuvbPihu JSPrhz7eRAf6iwdXiDY= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone zsoltsandor.me

zsoltsandor.me

	Checking DS between me and zsoltsandor.me
	Query to b2.nic.me for zsoltsandor.me/DS
	Received 253 bytes from 199.249.127.1
	;; Answer received from 199.249.127.1 (253 bytes) ;; HEADER SECTION ;; id = 59676 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN DS ;; ANSWER SECTION (2 records) zsoltsandor.me. 86400 IN DS ( 2371 13 2 cf65c671efbba7c386a6989e017991c1fc07acb31dbf8741460d36b71730c398 ) zsoltsandor.me. 86400 IN RRSIG ( DS 7 2 86400 20200730153053 20200709143053 20555 me. TsCFrSoD+m8Z/c4Fs/NIFAIq/JMyIkF2BPK+wbAyKk/nnw4KzMGcxM2TkPRT0yxswObBUS7qJ0ma 8o4e1k1QKPVi+ntI4jzqQL3UpUUpml/lL2DQXClD4QljPjfl3qNp1La7IdpndNkKDTP0cuvbPihu JSPrhz7eRAf6iwdXiDY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for zsoltsandor.me in the me zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`zsoltsandor.me. 86400 IN RRSIG ( DS 7 2 86400 20200730153053 20200709143053 20555 me. TsCFrSoD+m8Z/c4Fs/NIFAIq/JMyIkF2BPK+wbAyKk/nnw4KzMGcxM2TkPRT0yxswObBUS7qJ0ma 8o4e1k1QKPVi+ntI4jzqQL3UpUUpml/lL2DQXClD4QljPjfl3qNp1La7IdpndNkKDTP0cuvbPihu JSPrhz7eRAf6iwdXiDY= )`
	RRSIG=20555 and DNSKEY=20555 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`zsoltsandor.me. 86400 IN DS ( 2371 13 2 cf65c671efbba7c386a6989e017991c1fc07acb31dbf8741460d36b71730c398 )`
	Query to walt.ns.cloudflare.com for zsoltsandor.me/DNSKEY
	Received 313 bytes from 173.245.59.148
	;; Answer received from 173.245.59.148 (313 bytes) ;; HEADER SECTION ;; id = 12493 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN DNSKEY ;; ANSWER SECTION (3 records) zsoltsandor.me. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 zsoltsandor.me. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 zsoltsandor.me. 3600 IN RRSIG ( DNSKEY 13 2 3600 20200801225816 20200602225816 2371 zsoltsandor.me. WlcQgq55+2pqSJxbhP06g+lLVz/JuVE91Gh7dx3m/MRD3B4humqn4ed6kPGRd0uvyRIWyTA+wpe7 YOg5yFhvQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for zsoltsandor.me
	`zsoltsandor.me. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`zsoltsandor.me. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`zsoltsandor.me. 3600 IN RRSIG ( DNSKEY 13 2 3600 20200801225816 20200602225816 2371 zsoltsandor.me. WlcQgq55+2pqSJxbhP06g+lLVz/JuVE91Gh7dx3m/MRD3B4humqn4ed6kPGRd0uvyRIWyTA+wpe7 YOg5yFhvQA== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to beth.ns.cloudflare.com for zsoltsandor.me/A
	Received 169 bytes from 173.245.58.103
	;; Answer received from 173.245.58.103 (169 bytes) ;; HEADER SECTION ;; id = 11266 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN A ;; ANSWER SECTION (2 records) zsoltsandor.me. 20 IN A 104.248.60.43 zsoltsandor.me. 20 IN RRSIG ( A 13 2 20 20200713211222 20200711191222 34505 zsoltsandor.me. 03JDu37Wd4uCdH/c+WBAWK6SToDO+2szsMWs3m6CO146uadZFnrEdJY4La3nFzuLAlMunljk1S6E ItEU3oPgTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	zsoltsandor.me is authoritative for zsoltsandor.me
	Found RRSIG signed by zsoltsandor.me zone
	Query to walt.ns.cloudflare.com for zsoltsandor.me/SOA
	Received 215 bytes from 173.245.59.148
	;; Answer received from 173.245.59.148 (215 bytes) ;; HEADER SECTION ;; id = 49798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN SOA ;; ANSWER SECTION (2 records) zsoltsandor.me. 3600 IN SOA ( beth.ns.cloudflare.com. dns.cloudflare.com. 2034570193 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) zsoltsandor.me. 3600 IN RRSIG ( SOA 13 2 3600 20200713211222 20200711191222 34505 zsoltsandor.me. vdhQiy9TqixpHBm/DsIwzu89ur5/LDlD1hiTd8iU8B0NDIAxEAeHjuVkzcnPTVmXImomJB/6tbpn ElAMAKsIyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to beth.ns.cloudflare.com for zsoltsandor.me/SOA
	Received 215 bytes from 173.245.58.103
	;; Answer received from 173.245.58.103 (215 bytes) ;; HEADER SECTION ;; id = 56353 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN SOA ;; ANSWER SECTION (2 records) zsoltsandor.me. 3600 IN SOA ( beth.ns.cloudflare.com. dns.cloudflare.com. 2034570193 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) zsoltsandor.me. 3600 IN RRSIG ( SOA 13 2 3600 20200713211222 20200711191222 34505 zsoltsandor.me. 18VYLFQgSDF4QAjHoZaj+/UgIbsmNCvwYm7oen3OVVKMTb879fvXrf96F6W+AeRW9tIVpveSTO9b 3IQZWtAVHQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to beth.ns.cloudflare.com for zsoltsandor.me/A
	Received 169 bytes from 173.245.58.103
	;; Answer received from 173.245.58.103 (169 bytes) ;; HEADER SECTION ;; id = 11970 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; zsoltsandor.me. IN A ;; ANSWER SECTION (2 records) zsoltsandor.me. 20 IN A 104.248.60.43 zsoltsandor.me. 20 IN RRSIG ( A 13 2 20 20200713211222 20200711191222 34505 zsoltsandor.me. s1A+0DVBUsVb4uQXCo0K1ue22gvjVDKSYwWcAKaalQ1R7YK8AHgDPfl8Cl4hp5sVA8szj3nO+seF YAnBi7ynTQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	zsoltsandor.me A RR has value 104.248.60.43
	Found 1 RRSIGs over A RRset
	`zsoltsandor.me. 20 IN RRSIG ( A 13 2 20 20200713211222 20200711191222 34505 zsoltsandor.me. s1A+0DVBUsVb4uQXCo0K1ue22gvjVDKSYwWcAKaalQ1R7YK8AHgDPfl8Cl4hp5sVA8szj3nO+seF YAnBi7ynTQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test zsoltsandor.me at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: